Linux 13140
Google 12525
Microsoft 12378
Apple 6692
Oracle 6649
Adobe 6383
Ibm 6266
Cisco 5746
Debian 3919
Apache 2864
Mozilla 2857
Redhat 2581
Firefox
MEDIUM 6.5
Firefox behaved slightly differently for already known resources when loading CSS resources involving CSS variables. This could have been used to pro…
Firefox
MEDIUM 6.5
Securitypolicyviolation events could have leaked cross-origin information for frame-ancestors violations. This vulnerability affects Firefox ESR < 91…
Firefox
MEDIUM 6.5
Under certain circumstances, asynchronous functions could have caused a navigation to fail but expose the target URL. This vulnerability affects Thun…
Firefox
HIGH 7.4
A Content Provider in Firefox for Android allowed local files accessible by the browser to be read by a remote webpage, leading to sensitive data dis…
Firefox
HIGH 7.5
For native-to-JS bridging, the app requires a unique token to be passed that ensures non-app code can't call the bridging functions. That token was b…
Firefox
MEDIUM 5.3
The first time AirPods are connected to an iPhone, they become named after the user's name by default (e.g. Jane Doe's AirPods.) Websites with camera…
Firefox
MEDIUM 5.3
When in Private Browsing Mode on Windows 10, the Windows keyboard may retain word suggestions to improve the accuracy of the keyboard. This vulnerabi…
Firefox
MEDIUM 5.3
In private browsing mode on Firefox for Android, favicons are cached in the cache/icons folder as they are in non-private mode. This allows informati…
Firefox
HIGH 7.1
A WebExtension can request access to local files without the warning prompt stating that the extension will "Access your data for all websites" being…
Firefox
HIGH 7.5
WebExtensions may use "view-source:" URLs to view local "file:" URL content, as well as content stored in "about:cache", bypassing restrictions that …
Firefox
HIGH 7.5
A legacy extension's non-contentaccessible, defined resources can be loaded by an arbitrary web page through script. This script does this by using a…
Firefox
MEDIUM 6.5
The Find API for WebExtensions can search some privileged pages, such as "about:debugging", if these pages are open in a tab. This could allow a mali…
Firefox
MEDIUM 6.5
If the "app.support.baseURL" preference is changed by a malicious local program to contain HTML and script content, this content is not sanitized. It…
Firefox
MEDIUM 5.3
Image for moz-icons can be accessed through the "moz-icon:" protocol through script in web content even when otherwise prohibited. This could allow f…
Firefox
HIGH 7.5
If an HTTP authentication prompt is triggered by a background network request from a page or extension, it is displayed over the currently loaded for…
Firefox
MEDIUM 5.3
Style editor traffic in the Developer Tools can be routed through a service worker hosted on a third party website if a user selects error links when…
Firefox
MEDIUM 5.3
If an existing cookie is changed to be "HttpOnly" while a document is open, the original value remains accessible through script until that document …
Firefox
MEDIUM 5.3
The screenshot images displayed in the Activity Stream page displayed when a new tab is opened is created from the meta tags of websites. An issue wa…
Firefox
MEDIUM 5.3
The reader view will display cross-origin content when CORS headers are set to prohibit the loading of cross-origin content by a site. This could all…
Firefox
MEDIUM 6.5
A combination of an external SVG image referenced on a page and the coloring of anchor links stored within this image can be used to determine which …
Firefox
MEDIUM 5.3
A vulnerability where the security wrapper does not deny access to some exposed properties using the deprecated "_exposedProps_" mechanism on proxy o…
Firefox
MEDIUM 5.3
If a document's Referrer Policy attribute is set to "no-referrer" sometimes two network requests are made for "<link>" elements instead of one. One o…
Firefox
MEDIUM 5.3
A content security policy (CSP) "frame-ancestors" directive containing origins with paths allows for comparisons against those paths instead of the o…
Firefox
MEDIUM 5.3
If web content on a page is dragged onto portions of the browser UI, such as the tab bar, links can be opened that otherwise would not be allowed to …
Firefox
HIGH 7.5
Android intent URLs given to Firefox for Android can be used to navigate from HTTP or HTTPS URLs to local "file:" URLs, allowing for the reading of l…
Firefox
MEDIUM 5.5
The Mozilla Maintenance Service can be invoked by an unprivileged user to read 32 bytes of any arbitrary file on the local system by convincing the s…
Firefox
HIGH 7.5
The Gecko Media Plugin sandbox allows access to local files that match specific regular expressions. On OS OX, this matching allows access to some da…
Firefox
MEDIUM 5.5
The file picker dialog can choose and display the wrong local default directory when instantiated. On some operating systems, this can lead to inform…
Firefox
HIGH 7.5
Feed preview for RSS feeds can be used to capture errors and exceptions generated by privileged content, allowing for the exposure of internal inform…
Firefox
HIGH 7.5
Data sent with in multipart channels, such as the multipart/x-mixed-replace MIME type, will ignore the referrer-policy response header, leading to po…